Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
File: 225c70bf-4322-3691-bda9-5b4b15a20e82.roa (raw, json)
Hash identifier: JcC5dJrwglnUMlCCRd0QaeyDQszISUW06i/KCphKPYw=
Subject key identifier: D1:2D:45:EA:56:08:85:BD:61:31:A0:63:77:73:B1:00:27:73:4C:93
Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial: 010D0C9F432858493C09274A419B045899EABEC0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 36103
IP address blocks: 23.88.160.0/20 maxlen: 20
64.77.208.0/23 maxlen: 23
68.70.232.0/22 maxlen: 22
68.70.236.0/24 maxlen: 24
68.70.247.0/24 maxlen: 24
68.70.253.0/24 maxlen: 24
68.70.254.0/24 maxlen: 24
74.50.216.0/21 maxlen: 21
97.75.224.0/23 maxlen: 23
198.135.172.0/22 maxlen: 22
204.225.16.0/20 maxlen: 20
208.101.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:27:4a:41:9b:04:58:99:ea:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=9a56ed0e-f63e-4c2c-9757-34aeb718f050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:0d:4b:b2:6d:ac:3e:a5:2d:01:f8:7c:9e:
8a:e7:21:c0:0c:b9:3c:01:20:bf:d2:36:1a:a5:26:
a4:be:df:97:07:6b:b7:96:40:70:91:02:df:53:c5:
2e:81:9d:a2:f6:00:6c:94:09:6b:ad:9d:97:28:7b:
e7:27:7d:88:c5:85:dc:84:a4:fe:24:3b:4a:84:e5:
8f:c8:d0:22:af:88:0a:e1:6e:4a:59:c9:c0:ba:dc:
49:12:d0:f8:0e:dc:36:63:7f:fc:1c:1e:4f:86:a2:
d5:eb:e3:ba:02:08:6d:36:75:e2:33:7f:ef:ce:ad:
a5:d4:95:ba:6d:5f:a8:46:f5:43:f5:67:41:b9:29:
37:80:aa:1f:d9:88:c9:6e:42:af:71:e0:b6:29:06:
b4:3a:11:1a:93:8f:94:84:28:c3:8f:f9:92:4b:9e:
b4:66:a6:8e:d1:f5:4a:c1:6a:26:72:5c:5b:65:96:
ae:d7:32:bb:a2:7f:64:8b:9f:dc:61:d3:c7:97:e4:
02:ee:e2:56:3e:b6:d5:0f:ee:f5:b2:7b:e7:6f:49:
fd:a2:08:f9:63:6e:eb:f6:07:8a:d6:98:ef:94:04:
ab:84:5e:80:17:6b:8c:87:49:c3:f8:85:b0:02:c5:
1d:3f:63:c0:ad:56:51:25:b1:be:33:73:e0:14:f8:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2D:45:EA:56:08:85:BD:61:31:A0:63:77:73:B1:00:27:73:4C:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
X509v3 Authority Key Identifier:
keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.160.0/20
64.77.208.0/23
68.70.232.0-68.70.236.255
68.70.247.0/24
68.70.253.0-68.70.254.255
74.50.216.0/21
97.75.224.0/23
198.135.172.0/22
204.225.16.0/20
208.101.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d0:77:78:64:0b:a9:20:bf:46:d0:85:32:3d:01:f4:62:8e:
fe:02:1e:79:38:c4:f6:45:4e:52:77:1a:f9:c0:f8:16:da:4a:
0a:ed:a8:a1:b1:ae:31:c2:6d:41:72:88:24:e3:c6:91:ba:62:
66:52:86:79:1b:b4:cd:cc:a9:ac:2a:bb:65:17:4b:fb:af:37:
10:7b:b6:97:a4:4b:d2:ef:60:8a:2f:57:30:56:e9:db:c2:a6:
6b:66:92:7a:8a:dd:d4:e0:78:90:71:5c:66:4f:30:a3:5a:3f:
12:8a:17:d1:2f:40:9c:c8:d5:bc:64:bb:32:87:8a:44:cb:84:
8b:2f:ac:eb:08:cd:b2:bf:03:eb:a5:cd:6f:d3:c2:5f:8a:b8:
b0:ec:14:7d:0d:0f:08:f9:57:42:25:7f:4f:11:35:68:6c:ad:
0f:1d:a5:f6:2b:c2:61:03:f5:86:01:9b:42:23:4e:78:a1:21:
e8:78:f8:04:7d:d5:60:44:bf:3d:20:aa:b0:b5:5a:29:39:32:
31:12:a1:8c:35:26:94:cb:42:5a:06:79:13:7e:4b:07:8c:67:
a3:2a:5e:93:77:f0:18:5c:3b:e9:cc:8e:8c:9b:2a:3e:67:87:
82:6a:a5:97:49:c9:41:29:33:10:86:4f:5a:22:ed:59:e8:c1:
6f:23:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:04 2025 by rpki-client